SOAR Event
Catalog row in Vendor License Metrics · Cited
- Unit
- Event per 24 hours
- Aliases
- Splunk SOAR Events; Number of Events
- Definition
- Purchase Capacity and Limitations, Splunk Offerings (August 2026): "“Event” means a single event or grouping of discrete information regarding an event sent to the Software to act on"
- Counting rules
- On-premises Splunk SOAR is licensed either by the maximum number of Events per 24-hour period measured using Coordinated Universal Time, or by User Seats. Limited use case: the end user’s internal security purposes only.
- Floors / minimums
- Not stated.
- Applies to products
- Splunk SOAR
- Related metrics
- Product category